SECUNIA ADVISORY ID: SA42819 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/42819/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=42819 RELEASE DATE: 2011-01-06 DISCUSS ADVISORY: http://secunia.com/advisories/42819/#comments DESCRIPTION: A vulnerability has been reported in Novell Identity Manager, which can be exploited by malicious people to conduct cross-site scripting attacks. Certain unspecified input passed to the "Approval Form" is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. The vulnerability is reported in Identity Manager Roles Based Provisioning Module 3.7.0 (User Application 3.7.0) prior to Field Patch 370D. SOLUTION: Apply Field Patch 370D. Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html

What's Related http://secunia.com/advi... https://ca.secunia.com/... http://secunia.com/advi... http://secunia.com/prod... http://support.novell.c... More by kkbass More from Security

Story Options Mail Story to a Friend Printable Story Format

Trackback

Trackback URL for this entry: http://www.abend.org/trackback.php/20110106235019480

http://topsy.com/www.abend.org/article.php/20110106235019480?utm_source=pingback&utm_campaign=L2
Tracked on Friday, January 07 2011 @ 11:46 AM CST

Novell Gradually Loses What’s Left in Mail and Collaboration | Techrights
Tracked on Sunday, January 16 2011 @ 03:20 PM CST

[SA42819] Novell Identity Manager Cross-Site Scripting Vulnerability | 0 comments | Create New Account

Newest First Oldest First Flat Nested No Comments Threaded

The following comments are owned by whomever posted them. This site is not responsible for what they say.